Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438343a3a2f34382d3438203d3e203437323732.roa
File:                     323030313a3637633a6438343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          vIDnGQ1Vq776OmJY6MrmICZA4qMg4bU1DKtp5v3XV+8=
Subject key identifier:   90:92:0F:2A:56:5D:73:D8:38:7B:62:F4:4C:89:9D:4B:3B:E4:39:52
Certificate issuer:       /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial:       46ED5A2717EC993D3ECF7A1A5F1BC59328EBF4B2
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438343a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 10 Jan 2024 12:24:31 +0000
ROA not before:           Wed 10 Jan 2024 12:19:31 +0000
ROA not after:            Wed 08 Jan 2025 12:24:31 +0000
asID:                     47272
IP address blocks:        2001:67c:d84::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 20:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ed:5a:27:17:ec:99:3d:3e:cf:7a:1a:5f:1b:c5:93:28:eb:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
        Validity
            Not Before: Jan 10 12:19:31 2024 GMT
            Not After : Jan  8 12:24:31 2025 GMT
        Subject: CN=90920F2A565D73D8387B62F44C899D4B3BE43952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:e0:3d:78:5c:8e:57:0a:39:d7:2a:0f:b7:
                    4c:32:b2:ca:67:f0:0f:80:ad:6f:5d:d9:52:10:7b:
                    27:45:e6:69:ea:41:23:f3:92:3d:cf:de:f4:88:28:
                    5d:52:46:d1:15:6b:93:92:59:86:5a:75:fa:20:6e:
                    5d:70:fd:0b:74:9b:f0:92:74:2f:42:55:ff:2e:80:
                    b6:9a:e7:1d:96:da:46:59:33:6e:7e:6c:ca:d0:67:
                    9b:be:b9:6f:64:9d:01:9c:70:bf:2a:3a:7d:ec:19:
                    ff:d5:df:43:88:42:61:f8:84:15:77:ac:46:3a:6a:
                    f9:66:5b:0b:2d:b3:5f:80:a5:96:f9:cc:bf:6e:b0:
                    3b:fd:d8:57:ef:1b:b9:d4:72:6f:3f:77:c1:b9:01:
                    39:0d:30:f2:09:5a:b6:82:91:dc:3f:49:66:00:e8:
                    de:a8:60:aa:36:b1:6f:6b:82:37:bc:5c:79:2b:c9:
                    7e:ba:3c:fc:cf:04:33:16:46:21:d8:57:81:c0:62:
                    30:b8:c6:cb:82:19:d0:4d:2f:13:e4:24:a8:0e:70:
                    d4:ae:fa:95:52:bb:43:35:45:ea:59:fe:ae:55:97:
                    a7:83:25:e5:10:d8:87:2a:50:bf:1d:25:81:d8:83:
                    1c:04:80:f0:27:29:59:0d:d7:99:9c:28:c6:02:56:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:0F:2A:56:5D:73:D8:38:7B:62:F4:4C:89:9D:4B:3B:E4:39:52
            X509v3 Authority Key Identifier:
                keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438343a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d84::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:37:ea:6c:f3:0d:86:10:af:db:c7:01:d5:8e:24:7d:2e:ed:
         a3:e2:c0:b3:f1:1b:fa:cf:39:16:0e:9e:9f:b0:4a:22:93:6b:
         35:7d:ad:3b:c9:ac:3f:21:84:87:fd:ad:34:9a:de:9b:1c:00:
         16:6c:31:15:27:db:bf:26:af:67:e5:f2:19:90:57:fe:57:49:
         80:58:c2:74:34:48:ff:4c:7c:7c:ed:a1:04:a4:0b:4f:d3:36:
         bf:8c:de:99:8d:84:77:64:d8:73:21:3c:50:eb:88:3f:1c:f5:
         0c:eb:04:6d:b5:97:fe:e7:88:4d:0b:ee:8f:6f:c6:24:e1:84:
         6d:3c:0a:da:de:54:41:46:f4:5f:f5:60:fe:2c:0f:00:1c:94:
         39:e3:5a:f6:51:a6:66:cd:d0:81:68:07:9a:1d:b2:d5:de:62:
         d3:b2:f6:54:38:df:9b:be:04:07:64:02:7c:8c:a3:3a:56:52:
         84:f7:a0:19:70:6e:3c:4a:12:3e:37:ff:80:56:59:21:b5:3f:
         1d:77:cd:47:7b:b6:9e:7a:21:0d:23:75:48:d5:1c:e1:f9:c8:
         16:2b:9f:0c:af:0a:54:34:a8:47:bf:75:7f:fa:af:4d:b5:7e:
         8d:69:d0:47:99:98:29:3c:57:e8:4e:63:30:59:5f:ad:af:c9:
         9c:f8:23:5d
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIURu1aJxfsmT0+z3oaXxvFkyjr9LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWVjODA1ZTM3YzViNTMzNTFjNmExODI3NjM1MzBhNTBk
OTMwOGM3ZTAeFw0yNDAxMTAxMjE5MzFaFw0yNTAxMDgxMjI0MzFaMDMxMTAvBgNV
BAMTKDkwOTIwRjJBNTY1RDczRDgzODdCNjJGNDRDODk5RDRCM0JFNDM5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOyuA9eFyOVwo51yoPt0wysspn
8A+ArW9d2VIQeydF5mnqQSPzkj3P3vSIKF1SRtEVa5OSWYZadfogbl1w/Qt0m/CS
dC9CVf8ugLaa5x2W2kZZM25+bMrQZ5u+uW9knQGccL8qOn3sGf/V30OIQmH4hBV3
rEY6avlmWwsts1+ApZb5zL9usDv92FfvG7nUcm8/d8G5ATkNMPIJWraCkdw/SWYA
6N6oYKo2sW9rgje8XHkryX66PPzPBDMWRiHYV4HAYjC4xsuCGdBNLxPkJKgOcNSu
+pVSu0M1RepZ/q5Vl6eDJeUQ2IcqUL8dJYHYgxwEgPAnKVkN15mcKMYCVn2jAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUkJIPKlZdc9g4e2L0TImdSzvkOVIwHwYDVR0j
BBgwFoAUHsgF43xbUzUcahgnY1MKUNkwjH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzMvMUVDODA1RTM3QzVCNTMzNTFDNkExODI3NjM1MzBBNTBEOTMwOEM3RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0hzZ0Y0M3hiVXpVY2FoZ25ZMU1LVU5r
d2pINC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt
ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzMvMzIzMDMwMzEzYTM2Mzc2MzNh
NjQzODM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNzMyMzczMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACABBnwNhDANBgkqhkiG9w0BAQsFAAOCAQEAWTfqbPMNhhCv28cB1Y4kfS7t
o+LAs/Eb+s85Fg6en7BKIpNrNX2tO8msPyGEh/2tNJremxwAFmwxFSfbvyavZ+Xy
GZBX/ldJgFjCdDRI/0x8fO2hBKQLT9M2v4zemY2Ed2TYcyE8UOuIPxz1DOsEbbWX
/ueITQvuj2/GJOGEbTwK2t5UQUb0X/Vg/iwPAByUOeNa9lGmZs3QgWgHmh2y1d5i
07L2VDjfm74EB2QCfIyjOlZShPegGXBuPEoSPjf/gFZZIbU/HXfNR3u2nnohDSN1
SNUc4fnIFiufDK8KVDSoR791f/qvTbV+jWnQR5mYKTxX6E5jMFlfra/JnPgjXQ==
-----END CERTIFICATE-----